Re: [Clamav-users] problem in updating virus db

2004-01-13 Thread Abyot Asalefew
I have installed gmp-4.1.2 for 32 bit ABI support according to clamav 
documentation.


- Original Message -
From: Peter Bonivart <[EMAIL PROTECTED]>
Date: Monday, January 12, 2004 9:20 pm
Subject: Re: [Clamav-users] problem in updating virus db

> I'm just wondering if you have GMP on your machine? It's needed to 
> verify the signatures of the new database files introduced with 0.65.
> 
> /Peter Bonivart
> 
> --Unix lovers do it in the Sun
> 
> Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14,
> SpamAssassin 2.61 + DCC 1.2.21, ClamAV 0.65 + GMP
> 
> Abyot Asalefew wrote:
> > ClamAV update process started at Mon Jan 12 05:06:38 2004
> > ERROR: Malformed CVD header detected.
> > ERROR: Can't read main.cvd header from database.clamav.net 
> > (212.162.12.159)
> > ClamAV update process started at Mon Jan 12 05:08:56 2004
> 
> 
> ---
> This SF.net email is sponsored by: Perforce Software.
> Perforce is the Fast Software Configuration Management System 
offering
> advanced branching capabilities and atomic changes on 50+ platforms.
> Free Eval! http://www.perforce.com/perforce/loadprog.html
> ___
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
> 



---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] type of viruses being added to database

2004-01-13 Thread Tomasz Papszun
On Mon, 12 Jan 2004 at 13:20:45 -0500, jef moskot wrote:
> On Mon, 12 Jan 2004, Tomasz Papszun wrote:
> > Added are viruses which users submitted to us :-) .  Or found by us.
> 
> Well, yes, obviously, but could you maybe take a recent representative
> update and give us an idea of what the added viruses are like?  Just so
> that we get an approximate feeling of what's going on.
> 
> For example, you mentioned that the newest threats are added the most
> quickly, but I don't know if the last time you added an ancient virus was
> today or six months ago.

With quite a big probability, one can say that we add some ancient virus
every day. At least we try to. Although new viruses has a higher
priority, one of our goals is to improve ClamAV's detection "width" in
general.

> I'm not asking for precise figures, just something a little more concrete
> than "we add old and new viruses".

It varies, really. But it can be said that amount of older viruses added
to our database is significant.

-- 
 Tomasz Papszun   SysAdm @ TP S.A. Lodz, Poland  | And it's only
 [EMAIL PROTECTED]   http://www.lodz.tpsa.pl/   | ones and zeros.
 [EMAIL PROTECTED]   http://www.ClamAV.net/   A GPL virus scanner


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] type of viruses being added to database

2004-01-13 Thread Tomasz Papszun
On Mon, 12 Jan 2004 at 13:56:47 -0500, jef moskot wrote:
> On Mon, 12 Jan 2004, Daniel J McDonald wrote:
> > are you on the clamav-virusdb mailing list?
> 
> Yes, but it doesn't say whether the viruses are old or new, and looking
> them up given the various names used and the quantity of updates is not
> very convenient.

But we not always know whether a virus is old or new. Some possible
situations in which it's not known:

a) none of scanners detects a virus because it's a new one,
b) none of scanners detects a virus because it's very little popular,
   though old,
c) some scanners do detect a virus but the vendor hasn't published
   details about it (especially the date).

And, doing detailed survey is time-consuming. Protecting our users,
hence adding a signature, is more important than doing a broad study of
each virus. We just haven't got so much time.

> I'm really just looking for a GENERAL idea.  For example, if you had to
> explain to the average user what sort of viruses were being added to the
> database...is it MOSTLY new ones?  MOSTLY old ones?  About half and half?

And what does it mean "old"? :-) Older than a week? A month? A year?
Also, there are viruses, which are "old" (known for quite a long
time) but still met in the wild. So, in a "activity" aspect, they are
still "not old", still threatening.

> Would it be fair to say that when a new update comes out that it has
> likely been triggered by a recent discovery?

I wouldn't say so. Besides: objectively "recent" or subjectively (for
Clamav team) "recent"? :-).

-- 
 Tomasz Papszun   SysAdm @ TP S.A. Lodz, Poland  | And it's only
 [EMAIL PROTECTED]   http://www.lodz.tpsa.pl/   | ones and zeros.
 [EMAIL PROTECTED]   http://www.ClamAV.net/   A GPL virus scanner


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] clamav-milter compile problem

2004-01-13 Thread EyedMax
EyedMax wrote:
Hello, list!

I can't compile clamav-milter on my FREE-BSD 4.4-RELEASE system :(
Everything looks fine, except a few warnings about crypt, but no errors...
clamav-milter itself isn't appears after make.
Any ideas?

p.s. sendmail compiled with milter - actually I run a drweb mail filter 
via it...

//EyedMax
Is anybody here?

--
//EyedMax
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] problem in updating virus db

2004-01-13 Thread Daniel J McDonald
On Tue, 2004-01-13 at 07:41, Abyot Asalefew wrote:
> I have installed gmp-4.1.2 for 32 bit ABI support according to clamav 
> documentation.

You also need libgmp-devel, or whatever the development library package
is called on your distribution (on Mandrake it is libgmp3-devel) . 
After that is installed you have to recompile the freshclam binary.

> 
> 
> - Original Message -
> From: Peter Bonivart <[EMAIL PROTECTED]>
> Date: Monday, January 12, 2004 9:20 pm
> Subject: Re: [Clamav-users] problem in updating virus db
> 
> > I'm just wondering if you have GMP on your machine? It's needed to 
> > verify the signatures of the new database files introduced with 0.65.
> > 
> > /Peter Bonivart

-- 
Daniel J McDonald <[EMAIL PROTECTED]>
Austin Energy



---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] clamav-milter compile problem

2004-01-13 Thread Ing. Germán González B.

On Tue, 13 Jan 2004, EyedMax wrote:

> EyedMax wrote:
> > Hello, list!
> > 
> > I can't compile clamav-milter on my FREE-BSD 4.4-RELEASE system :(
> > Everything looks fine, except a few warnings about crypt, but no errors...
> > clamav-milter itself isn't appears after make.
> > 

Did you configure with --enable-milter option?

Regards

-

Germán González
PoderNet León
http://leon.podernet.com.mx

-



---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] clamav-milter compile problem

2004-01-13 Thread Daniel Wiberg
on 2004-01-13 15:33 Ing. Germán González B. said the following:

EyedMax wrote:
I can't compile clamav-milter on my FREE-BSD 4.4-RELEASE system :(
Everything looks fine, except a few warnings about crypt, but no errors...
clamav-milter itself isn't appears after make.
Did you configure with --enable-milter option?
Or 'cd /usr/ports/security/clamav && make -DWITH_MILTER install'

if building from ports.

//daniel wiberg

--
www.wiberg.nu
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] clamdscan problem: Can't access the file ERROR

2004-01-13 Thread ricardo
Hi,

I'm having a problem with clamdscan, this only happens when
running clamdscan and not clamscan.

I'm running clamav-0.65 on suse linux.

I'm running it over a directory which has a couple of virus
files. It works with clamscan, here's the output:

clamscan /dev/shm/tmp/messages/mime/1517/
/dev/shm/tmp/messages/mime/1517//textfile9: Worm.Gibe.F
FOUND
/dev/shm/tmp/messages/mime/1517//doubleCR.1: OK
/dev/shm/tmp/messages/mime/1517//qtc.exe: Worm.Gibe.F FOUND
/dev/shm/tmp/messages/mime/1517//textfile8: Empty file.
/dev/shm/tmp/messages/mime/1517//textfile7: OK
/dev/shm/tmp/messages/mime/1517//textfile6: OK
/dev/shm/tmp/messages/mime/1517//textfile5: Empty file.
/dev/shm/tmp/messages/mime/1517//textfile4: OK
/dev/shm/tmp/messages/mime/1517//textfile3: OK
/dev/shm/tmp/messages/mime/1517//textfile2: Empty file.
/dev/shm/tmp/messages/mime/1517//textfile1: Empty file.
/dev/shm/tmp/messages/mime/1517//textfile0: OK

--- SCAN SUMMARY ---
Known viruses: 20101
Scanned directories: 1
Scanned files: 8
Infected files: 2
Data scanned: 0.15 MB
I/O buffer size: 131072 bytes
Time: 8.050 sec (0 m 8 s)


Now here's the clamdscan output:

clamdscan /dev/shm/tmp/messages/mime/1517/
/dev/shm/tmp/messages/mime/1517/: Can't access the file
ERROR

--- SCAN SUMMARY ---
Infected files: 0
Time: 0.001 sec (0 m 0 s)

This is happening very consistenly... so virus scanning is
failing for me.

Any ideas what this could be?

Thanks
Ricardo



---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] problem in updating virus db

2004-01-13 Thread Christopher X. Candreva
On Tue, 13 Jan 2004, Abyot Asalefew wrote:

> I have installed gmp-4.1.2 for 32 bit ABI support according to clamav
> documentation.

FYI, for anyone else having trouble compiling GMP on Solaris 8 with
gcc 3.3.2 on Ultrasparc hardware,  I needed these CFLAGS to make it work:

-m64 -Wa,-xarch=v9 -mcpu=v9

The gmp info file also wanted an -mptr=64 flag, but that no longer seems to
be valid under gcc 3.3.2

==
Chris Candreva  -- [EMAIL PROTECTED] -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] clamdscan problem: Can't access the file ERROR

2004-01-13 Thread Trog
Quoting ricardo <[EMAIL PROTECTED]>:


> 
> Now here's the clamdscan output:
> 
> clamdscan /dev/shm/tmp/messages/mime/1517/
> /dev/shm/tmp/messages/mime/1517/: Can't access the file
> ERROR
> 

Most likely the user that clamd is running as doesn't have permission to access
the file.

-trog


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] Retract -- clamav, gmp, Solaris, gcc

2004-01-13 Thread Christopher X. Candreva

I take that back - it didn't work. clam complained the gmp library was not
compatable.

Solaris 8 on UltraSparc, gcc 3.3.2 , gmp 4.1.2

Last I tried compileing gmp with CFALGS blank. gmp built OK, but clamav now
says in configure:

checking for __gmpz_init in -lgmp... no
checking for mpz_init in -lgmp... no
WARNING: GNU MP 2 or newer NOT FOUND - digital signature support will be
disabled !


Has anyone gotten clamav / gmp to work on Solaris / Sparc ?

==
Chris Candreva  -- [EMAIL PROTECTED] -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Retract -- clamav, gmp, Solaris, gcc

2004-01-13 Thread Eric S. Pulley
--On Tuesday, January 13, 2004 12:38 PM -0500 "Christopher X. Candreva" 
<[EMAIL PROTECTED]> wrote:

I take that back - it didn't work. clam complained the gmp library was not
compatable.
Solaris 8 on UltraSparc, gcc 3.3.2 , gmp 4.1.2

Last I tried compileing gmp with CFALGS blank. gmp built OK, but clamav
now says in configure:
checking for __gmpz_init in -lgmp... no
checking for mpz_init in -lgmp... no
WARNING: GNU MP 2 or newer NOT FOUND - digital signature support will be
disabled !
Has anyone gotten clamav / gmp to work on Solaris / Sparc ?

==
Chris Candreva  -- [EMAIL PROTECTED] -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
There is a README of FAQ addressing this.  But the quick answer is...

you need to configure gmp 4.1.2 with
'configure ABI=32' then 'make'; 'make install'
Then configure clamav

--
ESP
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Retract -- clamav, gmp, Solaris, gcc

2004-01-13 Thread clamav
At 09:38 AM 1/13/2004, Christopher X. Candreva wrote:

I take that back - it didn't work. clam complained the gmp library was not
compatable.
Solaris 8 on UltraSparc, gcc 3.3.2 , gmp 4.1.2

Last I tried compileing gmp with CFALGS blank. gmp built OK, but clamav now
says in configure:
checking for __gmpz_init in -lgmp... no
checking for mpz_init in -lgmp... no
WARNING: GNU MP 2 or newer NOT FOUND - digital signature support will be
disabled !
Has anyone gotten clamav / gmp to work on Solaris / Sparc ?
running fine here on solaris 9 on a netra t1, built with gcc 3.3.2. are you 
following the sections in the gmp docs about the ABI settings on 64bit 
platforms, and the related caveats in the clamav docs?

Paul Theodoropoulos
http://www.anastrophe.com


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] problem in updating virus db

2004-01-13 Thread Peter Bonivart
He's running Solaris...

/Peter Bonivart

--Unix lovers do it in the Sun

Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14,
SpamAssassin 2.61 + DCC 1.2.21, ClamAV 0.65 + GMP
Daniel J McDonald wrote:
You also need libgmp-devel, or whatever the development library package
is called on your distribution (on Mandrake it is libgmp3-devel) . 
After that is installed you have to recompile the freshclam binary.


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Retract -- clamav, gmp, Solaris, gcc

2004-01-13 Thread Peter Bonivart
Works fine here. Just remember to set ABI to 32 before configure ; make 
; make install. Then it should not give you any problems when 
configuring Clam.

/Peter Bonivart

--Unix lovers do it in the Sun

Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14,
SpamAssassin 2.61 + DCC 1.2.21, ClamAV 0.65 + GMP
Christopher X. Candreva wrote:
Has anyone gotten clamav / gmp to work on Solaris / Sparc ?


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] clamdscan problem: Can't access the file ERROR

2004-01-13 Thread Ricardo Kleemann

Hi,

I'm having a problem with clamdscan, this only happens when
running clamdscan and not clamscan.

I'm running clamav-0.65 on suse linux.

I'm running it over a directory which has a couple of virus
files. It works with clamscan, here's the output:

clamscan /dev/shm/tmp/messages/mime/1517/
/dev/shm/tmp/messages/mime/1517//textfile9: Worm.Gibe.F
FOUND
/dev/shm/tmp/messages/mime/1517//doubleCR.1: OK
/dev/shm/tmp/messages/mime/1517//qtc.exe: Worm.Gibe.F FOUND
/dev/shm/tmp/messages/mime/1517//textfile8: Empty file.
/dev/shm/tmp/messages/mime/1517//textfile7: OK
/dev/shm/tmp/messages/mime/1517//textfile6: OK
/dev/shm/tmp/messages/mime/1517//textfile5: Empty file.
/dev/shm/tmp/messages/mime/1517//textfile4: OK
/dev/shm/tmp/messages/mime/1517//textfile3: OK
/dev/shm/tmp/messages/mime/1517//textfile2: Empty file.
/dev/shm/tmp/messages/mime/1517//textfile1: Empty file.
/dev/shm/tmp/messages/mime/1517//textfile0: OK

--- SCAN SUMMARY ---
Known viruses: 20101
Scanned directories: 1
Scanned files: 8
Infected files: 2
Data scanned: 0.15 MB
I/O buffer size: 131072 bytes
Time: 8.050 sec (0 m 8 s)


Now here's the clamdscan output:

clamdscan /dev/shm/tmp/messages/mime/1517/
/dev/shm/tmp/messages/mime/1517/: Can't access the file
ERROR

--- SCAN SUMMARY ---
Infected files: 0
Time: 0.001 sec (0 m 0 s)

This is happening very consistenly... so virus scanning is
failing for me.

Any ideas what this could be?

Thanks
Ricardo


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] Trying to revert to v0.60 because I can't use v0.65

2004-01-13 Thread Lloyd Albin
I have installed clamav 0.65 on Redhat and and had problem with the
freshclam and clamd crashing which I has been fixed in the current devel
version, but I can't run the devel version with qmail-scanner. When I
tried reverting to clamav 0.60 it chatches the viruses until you to the
first freshclam and then it won't catch any viruses using qmail-scanner
but it will catch them from the shell prompt using clamscan. If I do a
make install, it then starts catching viruses again. How do I fix this?
-- 
Lloyd Albin <[EMAIL PROTECTED]>




---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] problem in updating virus db

2004-01-13 Thread Alex S Moore
On Tue, 13 Jan 2004 11:56:03 -0500 (EST)
"Christopher X. Candreva" <[EMAIL PROTECTED]> wrote:

> On Tue, 13 Jan 2004, Abyot Asalefew wrote:
> 
> > I have installed gmp-4.1.2 for 32 bit ABI support according to clamav
> > documentation.
> 
> FYI, for anyone else having trouble compiling GMP on Solaris 8 with
> gcc 3.3.2 on Ultrasparc hardware,  I needed these CFLAGS to make it work:
> 
> -m64 -Wa,-xarch=v9 -mcpu=v9
> 
> The gmp info file also wanted an -mptr=64 flag, but that no longer seems to
> be valid under gcc 3.3.2
> 

If you like I can send you my Solaris 8 libgmp package.  It is ready to install
and works fine on Solaris 8 and 9.  I currently have the SPARC package, but I
can also make a x86 package if someone needs it.  Let me know.

One small caveat, I am a package maintainer for blastwave.org and my package
depends on our common package.  If you are currently not setup for packages from
blastwave, it is very simple to do and I recommend it.  See
http://www.blastwave.org  If push comes to shove, I can easily remove the
dependency, but I do plan to make clamav available from blastwave, which will
take care of the dependency.

Alex Moore


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Retract -- clamav, gmp, Solaris, gcc

2004-01-13 Thread Christopher X. Candreva

Thanks to everyone who mentioned ABI=32 . Obviously that did it. However . .

> There is a README of FAQ addressing this.  But the quick answer is...

In fairness though, gmp is NOT mentioned in the 0.65 README file, and FAQ is
rather sparse. README says a change to the mirrors system is noted in the
full pdf docs, but doesn't mention a change to the build process.

Unless I've missed something, in which case I apologize, new required
libraries would be a good thing to add under changes in the README for
future releases.

==
Chris Candreva  -- [EMAIL PROTECTED] -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] Are there any open source virus scanners for windows desktop?

2004-01-13 Thread Ricardo Kleemann
Hi,

I use clamav on my linux server...

But of course I want to protect my windows desktop against
viruses and be able to scan my disks. Am I still stuck with
having to pay Norton or whoever else for a windows scanner?

Any open source alternatives?

Thanks
Ricardo


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Are there any open source virus scanners for windows desktop?

2004-01-13 Thread Antony Stone
On Tuesday 13 January 2004 6:56 pm, Ricardo Kleemann wrote:

> Hi,
>
> I use clamav on my linux server...
>
> But of course I want to protect my windows desktop against
> viruses and be able to scan my disks. Am I still stuck with
> having to pay Norton or whoever else for a windows scanner?
>
> Any open source alternatives?

I do not know of any Open Source A-V products for Windows, however you should 
have no difficulty finding A-V scanners for Windows which are free to use, 
especially if the machine is a personal (home) computer rather than a 
corporate system.

Alternatively, of course, set up a network share of your C: drive and use 
smbmount on your linux server to scan files using ClamAV :)

Antony.

-- 
Having been asked for a reference for this man,
I can confirm that you will be very lucky indeed if you can get him to work 
for you.

 Please reply to the list;
   please don't CC me.



---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Are there any open source virus scanners for windows desktop?

2004-01-13 Thread Antony Stone
On Tuesday 13 January 2004 7:07 pm, Antony Stone wrote:

> On Tuesday 13 January 2004 6:56 pm, Ricardo Kleemann wrote:
> > Hi,
> >
> > I use clamav on my linux server...
> >
> > But of course I want to protect my windows desktop against
> > viruses and be able to scan my disks. Am I still stuck with
> > having to pay Norton or whoever else for a windows scanner?
> >
> > Any open source alternatives?
>
> I do not know of any Open Source A-V products for Windows,

Sorry for replying to my own posting, but I should have mentioned that I 
believe people have had success compiling ClamAV under Cygwin (can anyone 
confirm?), so that would be a perfect solution to your requirement.

Antony.

-- 
RTFM may be the appropriate reply, but please specify exactly which FM to R.

 Please reply to the list;
   please don't CC me.



---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Are there any open source virus scanners for windows desktop?

2004-01-13 Thread Patrick Boutilier
Ricardo Kleemann wrote:
Hi,

I use clamav on my linux server...

But of course I want to protect my windows desktop against
viruses and be able to scan my disks. Am I still stuck with
having to pay Norton or whoever else for a windows scanner?
Any open source alternatives?

Thanks
Ricardo
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
http://www.grisoft.com/us/us_dwnl_free.php

AVG is free for home use.



---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Trying to revert to v0.60 because I can't use v0.65

2004-01-13 Thread Daniel J McDonald
On Tue, 2004-01-13 at 12:16, Lloyd Albin wrote:
> . When I
> tried reverting to clamav 0.60 it chatches the viruses until you to the
> first freshclam and then it won't catch any viruses using qmail-scanner
> but it will catch them from the shell prompt using clamscan. If I do a
> make install, it then starts catching viruses again. How do I fix this?


Make certain you remove all of the 6.5 freshclam binaries.  There are
installed in a different place now, and your path may be finding the 6.5
one before the 6.0 one.
-- 
Daniel J McDonald, CCIE 2495, CNX
Austin Energy




---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Retract -- clamav, gmp, Solaris, gcc

2004-01-13 Thread Peter Bonivart
It's mentioned in bold in the docs but who reads them... ;-)

/Peter Bonivart

--Unix lovers do it in the Sun

Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14,
SpamAssassin 2.61 + DCC 1.2.21, ClamAV 0.65 + GMP
Christopher X. Candreva wrote:
In fairness though, gmp is NOT mentioned in the 0.65 README file, and FAQ is
rather sparse. README says a change to the mirrors system is noted in the
full pdf docs, but doesn't mention a change to the build process.
Unless I've missed something, in which case I apologize, new required
libraries would be a good thing to add under changes in the README for
future releases.


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] Re: Are there any open source virus scanners for windows desktop?

2004-01-13 Thread Edward Terry
You can find ClamAV for Windows (implemented via Cygwin) at 
http://www.sosdg.org/clamav-win32/index.php. 

Edward

-Original Message-
From: Antony Stone <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: [Clamav-users] Are there any open source virus scanners for
 windows desktop?  On Tuesday 13 January 2004 6:56 pm, Ricardo Kleemann wrote:
<> > Hi,
<> >
<> > I use clamav on my linux server...
<> >
<> > But of course I want to protect my windows desktop against
<> > viruses and be able to scan my disks. Am I still stuck with
<> > having to pay Norton or whoever else for a windows scanner?
<> >
<> > Any open source alternatives?
<>
<> I do not know of any Open Source A-V products for Windows,
<
http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] clamd scan failure

2004-01-13 Thread STEPHEN_DAVID SCANLAN
I have tried repeatedly to get clamdscan to work, but It doesn't on my RH
8.0 model. I rhink the problem is with a non-functioning clamd.

The error is connect(): connection refused
Error: can't connect to clamd.

I recompiled everything from scratch, changed the conf file and still have
problems. Do I have to do anything with Clamuko to get clamd to work?

Can someone give me a short, but detailed set of instructions on how to
get clamd up and to test it?




---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Re: Are there any open source virus scanners for windows desktop?

2004-01-13 Thread Fajar A. Nugraha
Actually, ClamAV would be a bad option for Win32 desktop scanner, as

- it does not include a code emulation which makes it useless against 
polymorphic viruses.
- it does not have OLE2 engine which makes it unable to detect 
practically all macro viruses.
- no frontend currently exists to implement real-time on-access scan on 
Win32 platform (no clamuko for Windows).

However, it is perfect for "integration with mail servers (attachment 
scanning)". So if you have a mail server that runs under Win32 (like 
CommuniGate Pro), and can find (or make) the plugin for clamav (like 
cgpav),  then clamav-win32 might be a good choice.

For on-demand scanner, "clamscan /cygdrive/c" should work.

Fajar Nugraha

Edward Terry wrote:

You can find ClamAV for Windows (implemented via Cygwin) at 
http://www.sosdg.org/clamav-win32/index.php. 

Edward

-Original Message-
From: Antony Stone <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: [Clamav-users] Are there any open source virus scanners for
windows desktop? 
Reply-To: [EMAIL PROTECTED]
<

<
<> On Tuesday 13 January 2004 6:56 pm, Ricardo Kleemann wrote:
<> > Hi,
<> >
<> > I use clamav on my linux server...
<> >
<> > But of course I want to protect my windows desktop against
<> > viruses and be able to scan my disks. Am I still stuck with
<> > having to pay Norton or whoever else for a windows scanner?
<> >
<> > Any open source alternatives?
<>
<> I do not know of any Open Source A-V products for Windows,
<



<

<
<--

<
<   Please reply to the list; please don't CC me. 
<
 



---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] clamscan doesn't detect virus in .zip

2004-01-13 Thread Tomasz Kojm
On Mon, 5 Jan 2004 17:18:27 +0100
Tomasz Kojm <[EMAIL PROTECTED]> wrote:

> clamav 0.65 returns with the following error message:
> 
> $ clamscan videos.zip 
> videos.zip: Zip module failure.
> videos.zip: OK

Sorry, that's not true (I had installed other version). ClamAV 0.65
properly recognizes the file - the problem was introduced in 20031224
and it's now fixed in CVS. Thanks for reporting this issue (and sorry
for the delay !).

Best regards,
Tomasz Kojm
-- 
  oo.   [EMAIL PROTECTED] www.ClamAV.net
 (\/)\. http://www.clamav.net/gpg/tkojm.gpg
\..._   0DCA5A08407D5288279DB43454822DC8985A444B
  //\   /\  Wed Jan 14 03:27:52 CET 2004


pgp0.pgp
Description: PGP signature


[Clamav-users] How to make Clam-AV to detect perticular virus

2004-01-13 Thread Dilip M
Hi,

I'm having,

# clamdscan -V;clamscan -V
clamdscan / ClamAV version 0.65
clamscan / ClamAV version 0.65
# more /var/log/clam-update.log
--
ClamAV update process started at Wed Jan 14 06:15:00 2004
main.cvd is up to date (version: 16, sigs: 19819, f-level: 1, builder: ddm)
daily.cvd is up to date (version: 84, sigs: 282, f-level: 1, builder: ddm)
--
Some of the virus are being detected,but i got one of this following virus 
without being detected by Clam-AV.(See the file attached for details)

How could i make Clam-AV to detect this ?

Thanks
-Dilip.MDisplay all headers 
Date:  Wed, 14 Jan 2004 00:00:59 +0900 
From:  "Microsoft Corporation Internet Security Division" <[EMAIL PROTECTED]> 
To:  "Client" <[EMAIL PROTECTED]> 
Subject:  Latest Network Security Update 

Microsoft  All Products | Support | Search | Microsoft.com Guide  
Microsoft Home  


MS Client

this is the latest version of security update, the "January 2004, Cumulative 
Patch" update which eliminates all known security vulnerabilities affecting MS 
Internet Explorer, MS Outlook and MS Outlook Express as well as three new 
vulnerabilities. Install now to help protect your computer from these 
vulnerabilities, the most serious of which could allow an attacker to run 
executable on your computer. This update includes the functionality of all 
previously released patches.  


System requirements  Windows 95/98/Me/2000/NT/XP 
This update applies to  MS Internet Explorer, version 4.01 and later
MS Outlook, version 8.00 and later
MS Outlook Express, version 4.01 and later  
Recommendation Customers should install the patch at the earliest opportunity. 
How to install Run attached file. Choose Yes on displayed dialog box. 
How to use You don't need to do anything after installing this item. 

Microsoft Product Support Services and Knowledge Base articles can be found on 
the Microsoft Technical Support web site. For security-related information about 
Microsoft products, please visit the Microsoft Security Advisor web site, or 
Contact Us. 

Thank you for using Microsoft products.

Please do not reply to this message. It was sent from an unmonitored e-mail 
address and we are unable to respond to any replies.

The names of the actual companies and products mentioned herein are the 
trademarks of their respective owners.  

Contact Us | Legal | TRUSTe  
©2004 Microsoft Corporation. All rights reserved. Terms of Use | Privacy 
Statement | Accessibility  

Installer3.exe 

Re: [Clamav-users] problem in updating virus db

2004-01-13 Thread Abyot Asalefew

I have no problem in installing gmp under solaris
As shown below gmp is configured for 32 bit ABI support. And clamav has 
sucessfully detected gmp

gmp ./configure screen shoot
===
checking dependency style of gcc... none
checking for gcc option to accept ANSI C... none needed
checking how to run the C preprocessor... gcc -E
using ABI="32"
  CC="gcc"
  CFLAGS="-g -O2 -Wa,-xarch=v8plus -mcpu=ultrasparc"
  CPPFLAGS=""
  MPN_PATH=" sparc32/v9 sparc32/v8 sparc32 generic"
checking for gcc option to accept ANSI C... none needed
checking for function prototypes... yes
checking for ANSI C header files... yes
checking for string.h... yes
===



clamav ./configure screen shoot
===
checking for bzReadOpen in -lbz2... yes
checking libmilter/mfapi.h usability... no
checking libmilter/mfapi.h presence... no
checking for libmilter/mfapi.h... no
checking for __gmpz_init in -lgmp... yes
checking syslog.h usability... yes
checking syslog.h presence... yes
checking for syslog.h... yes
/dev/(u)random detected.
Checking /etc/passwd...


My problem is I couldn't update the virus db using freshclam, all the 
time I get

--
Current working dir is /usr/local/share/clamav
ClamAV update process started at Wed Jan 14 08:53:49 2004
Connected to clamav.nettron.co.za (195.86.57.50).
Reading CVD header (main.cvd): ERROR: Malformed CVD header detected.
ERROR: Can't read main.cvd header from clamav.nettron.co.za 
(195.86.57.50)
Waiting 10 seconds...
ClamAV update process started at Wed Jan 14 08:56:07 2004
--



- Original Message -
From: Peter Bonivart <[EMAIL PROTECTED]>
Date: Tuesday, January 13, 2004 8:57 pm
Subject: Re: [Clamav-users] problem in updating virus db

> He's running Solaris...
> 
> /Peter Bonivart
> 
> --Unix lovers do it in the Sun
> 
> Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14,
> SpamAssassin 2.61 + DCC 1.2.21, ClamAV 0.65 + GMP
> 
> Daniel J McDonald wrote:
> > You also need libgmp-devel, or whatever the development library 
> package> is called on your distribution (on Mandrake it is libgmp3-
> devel) . 
> > After that is installed you have to recompile the freshclam binary.
> 
> 
> ---
> This SF.net email is sponsored by: Perforce Software.
> Perforce is the Fast Software Configuration Management System offering
> advanced branching capabilities and atomic changes on 50+ platforms.
> Free Eval! http://www.perforce.com/perforce/loadprog.html
> ___
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
> 



---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users